Okta SMS Verification Originates From the EU Despite the Call Originating From the US
Last Updated:
Overview
The System Log indicates that Short Message Service (SMS) for Multi-Factor Authentication (MFA) originates from a European Union (EU) location even when the call originates from the United States (US). This occurs because Okta phone carriers maintain data centers in both the EU and the US, and carrier routing dictates the origin. This expected behavior within the provider network requires no action.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Multi-Factor Authentication (MFA)
- Short Message Service (SMS) MFA
- Phone Call MFA
Cause
Okta phone carriers, such as Twilio and Telesign, maintain data centers in both the EU and the US. MFA challenges originate from an EU data center based on carrier routing, which does not indicate a security threat or privacy issue.
Solution
Why do SMS and phone call verifications appear to originate from the EU?
Verification challenges via phone call or SMS appear in the System Log as EU-originated due to the service providers' global infrastructure. This expected behavior within the provider network requires no action.
